DPD support chatbot swears at a customer and disparages the company

In the wild Manipulation Severity 1 minor Corroborated 80%

Musician Ashley Beauchamp, unable to get help tracking a parcel from DPD's chatbot, prompted it to swear, write a poem about how terrible the company was and call DPD 'the worst delivery firm in the world'. His screenshots on X were viewed hundreds of thousands of times. DPD said an error had occurred after a system update and that it had immediately disabled the AI element of its chat.

DPD said it had operated an AI element within its chat successfully for a number of years and that the element was being updated. The company said it was in touch with Beauchamp to resolve his parcel issue.

What would have stopped it

Regression-test a customer-facing bot's behavioural guardrails after every system update before it goes live.

Guardrails

1 of 8 failed
  1. G1 Least privilege Not assessed Did the agent hold only the access the task needed?
  2. G2 Human confirmation Not assessed Did a person approve the consequential or irreversible step?
  3. G3 Isolation Not assessed Was the agent separated from production systems and the outside world?
  4. G4 Instruction integrity Failed Bot complied with a customer's requests to swear and criticise the company.
  5. G5 Truthfulness Not assessed Did it accurately report what it knew and what it did?
  6. G6 Limits Not assessed Was there a cap on rate, spend, volume or scale?
  7. G7 Oversight Partial DPD disabled the AI element only after the exchange went viral.
  8. G8 Recovery Not assessed Could the damage be undone?

Sources

2 press
  1. “DPD has disabled part of its online support chatbot after it swore at a customer.”
    Press Quote checked Archived copy
  2. “The delivery firm DPD has disabled part of its artificial intelligence (AI) powered online chatbot after a disgruntled customer was able to make it swear and criticise the company.”
    Press Quote checked Archived copy

Confidence 80% comes from these sources alone. How we score

History

  1. 14 Oct 2026Entered in the register with 2 sources

Similar failures

All incidents
  1. EEAIR-2026-049 Oct 2026 Researchers say AGENTS.md files can hijack Codex and Claude Code agents OpenAI Codex and Claude Code, OpenAI, AnthropicProof of concept 55%
  2. EEAIR-2025-029 Nov 2025 WSJ journalists talk a Claude vending agent into giving away its stock and a PlayStation 5 Claudius (Claude), Anthropic and Andon Labs 96%
  3. EEAIR-2025-042 Oct 2025 URL-like strings pasted into ChatGPT Atlas's omnibox run as trusted agent commands ChatGPT Atlas browser (agent mode), OpenAIProof of conceptEU 82%